Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
File:                     c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa (download)
Hash identifier:          aOxmZIJeW5+Sj6EqPkp2jc6tgmLUgays9TkPOMpEUwc=
Subject key identifier:   B9:D6:0D:B3:A0:92:9D:FD:30:B9:05:B1:44:91:68:91:11:A4:50:64
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F4328583EB2D8739AB3CFD438734D6200
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
ROA valid until:          Oct 28 04:00:00 2024 GMT
asID:                     399820
IP address blocks:
    1: 204.137.14.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b2:d8:73:9a:b3:cf:d4:38:73:4d:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Jul 26 18:18:22 2022 GMT
            Not After : Oct 28 04:00:00 2024 GMT
        Subject: CN=56a4df8a-4642-4e00-b6cf-b7022d42e72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:cf:80:7b:0f:5d:67:82:ef:c7:a4:b9:23:
                    b5:68:be:31:15:99:a2:f1:95:40:57:8f:29:66:ce:
                    56:b9:86:64:39:0e:6e:98:ac:a1:f2:1e:17:14:66:
                    5a:dc:7d:ab:2b:49:46:e3:c9:2b:be:fc:48:83:47:
                    aa:62:fd:93:b5:f5:7f:1a:f4:ea:aa:26:61:7a:6d:
                    0a:42:53:69:46:e6:07:8d:1a:e6:90:23:c4:c8:29:
                    7d:75:ef:ad:72:62:8f:d4:84:8e:0a:b0:f8:30:b0:
                    29:74:33:0c:e9:5d:d5:80:07:b1:57:5c:bf:ab:9f:
                    0a:ea:72:32:84:35:e4:48:74:9b:78:8e:fd:18:fc:
                    34:41:53:40:24:fd:bb:a3:a5:56:19:7c:47:05:c4:
                    c7:cd:90:73:f1:74:c0:b3:54:c7:a8:b7:c8:cb:af:
                    f0:15:7f:de:98:92:05:21:68:eb:ae:54:f3:eb:f2:
                    38:07:cb:0d:f5:70:14:18:21:23:d3:ef:16:5d:35:
                    27:e6:ff:ef:75:83:b9:7e:fa:4f:55:c5:fa:da:ec:
                    dd:ed:e2:2a:a6:91:fb:cb:1f:7c:da:b8:2a:cd:74:
                    1d:24:d0:3f:0a:20:3a:77:14:85:4e:3c:a1:69:35:
                    43:2c:49:19:d0:2f:65:48:13:40:d1:1f:69:78:3b:
                    26:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B9:D6:0D:B3:A0:92:9D:FD:30:B9:05:B1:44:91:68:91:11:A4:50:64
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier: 
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.137.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:ed:6c:91:21:34:c8:3a:19:cd:50:f1:cf:01:1a:4a:70:
         03:29:91:c8:cb:98:c0:24:8a:f7:9b:8e:0f:e0:79:ee:6e:69:
         07:bb:12:f0:1b:d9:68:28:10:cd:21:2c:77:c5:f5:d7:e8:cc:
         9c:0c:fc:d1:74:31:08:8d:83:83:f3:9f:0b:ff:f4:28:dc:65:
         7c:ce:b9:dc:40:b5:23:85:9c:70:20:6b:27:8e:60:1d:08:57:
         77:69:5e:08:e5:d3:fc:38:d1:27:dc:97:d0:01:97:34:88:56:
         b5:41:e9:b5:a8:52:17:72:a6:4d:8c:ad:a3:db:2e:0b:b3:59:
         f9:9a:2b:6b:b4:86:93:e0:7f:92:48:d1:71:c3:83:36:fa:3c:
         bf:05:25:d8:81:31:25:94:a1:5b:5e:f2:85:e8:fa:d2:33:0f:
         9d:98:24:ef:4d:ef:5c:c0:a3:73:de:05:88:c7:44:e8:a6:d0:
         3d:e8:04:b2:6f:aa:e4:c8:5a:cc:19:cb:99:35:e0:7d:04:a5:
         99:66:ad:e3:aa:2c:f6:79:d7:b4:12:1c:a6:96:95:f3:a2:3d:
         f3:ad:c4:c4:f6:c7:d3:95:8e:a8:1e:5e:c7:de:12:b8:d5:ab:
         43:54:73:b4:8b:e0:b1:90:1b:74:67:ac:70:5a:48:dc:df:00:
         68:8b:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:10:07 2022 by rpki-client.